diff --git a/.gitignore b/.gitignore
index 436a6cb..da43391 100644
--- a/.gitignore
+++ b/.gitignore
@@ -100,3 +100,5 @@ certmonger-0.28.tar.gz
 /certmonger-0.77.3.tar.gz.sig
 /certmonger-0.77.4.tar.gz
 /certmonger-0.77.4.tar.gz.sig
+/certmonger-0.77.5.tar.gz
+/certmonger-0.77.5.tar.gz.sig
diff --git a/certmonger.spec b/certmonger.spec
index c0c976d..b84e6b8 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -25,7 +25,7 @@
 %endif
 
 Name:		certmonger
-Version:	0.77.4
+Version:	0.77.5
 Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
@@ -239,6 +239,15 @@ exit 0
 %endif
 
 %changelog
+* Thu May 28 2015 Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
+- pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
+  includes IP address subjectAltName values
+- correctly verify signatures on SCEP server replies when the signer is neither
+  the top-level CA nor the RA (feedback in #1161768)
+- correctly verify signatures on SCEP server replies when there is more than
+  one certificate in the chain between the RA and the top-level CA (feedback in
+  #1161768)
+
 * Fri May 15 2015 Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
 - don't display PINs in "getcert list" output (#42)
 - clean up launching of a private instance in "getcert"
diff --git a/sources b/sources
index de05af4..1bd1f53 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-f72398462d8d469abdd76955313da6b0  certmonger-0.77.4.tar.gz
-478c62809a1986b731322bd98cb53034  certmonger-0.77.4.tar.gz.sig
+eec04ad0632f928568532265a2e5350a  certmonger-0.77.5.tar.gz
+9bdf54da04119893c1c37a413b335573  certmonger-0.77.5.tar.gz.sig